Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa
File:                     c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa (raw, json)
Hash identifier:          UOochOMJT20fLURj04HBhoPCsSN5X8xYiWAgS3cJF3s=
Subject key identifier:   3D:2E:9D:4F:AB:93:9B:EA:54:DE:61:E2:81:C8:61:9A:97:BB:8B:BB
Certificate issuer:       /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial:       010D0C9F43285844F19AA74A9BB2EACE10392174
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa
Signing time:             Mon 19 Feb 2024 14:00:31 +0000
ROA not before:           Mon 19 Feb 2024 14:00:31 +0000
ROA not after:            Sun 19 May 2024 13:00:31 +0000
asID:                     399820
IP address blocks:        204.137.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f1:9a:a7:4a:9b:b2:ea:ce:10:39:21:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
        Validity
            Not Before: Feb 19 14:00:31 2024 GMT
            Not After : May 19 13:00:31 2024 GMT
        Subject: CN=dd24066c-14d8-45d6-9472-9b7e0541de26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:90:db:70:3b:18:3f:90:75:cd:9e:b2:c3:
                    98:82:c1:a5:f8:0d:72:dc:2a:69:c7:d5:f2:1e:ed:
                    71:e3:a5:c5:91:fd:f1:a5:c9:ef:78:44:31:d9:c8:
                    82:5e:0a:2c:7f:5b:b1:12:c8:ee:75:cc:ec:4f:c9:
                    db:6c:84:c2:d3:9c:b6:24:1d:1d:ad:eb:04:2d:f2:
                    08:a3:6f:af:b3:1f:57:85:a6:c0:26:e1:8a:bc:06:
                    f7:85:69:c2:67:b6:0f:3b:e6:0b:fd:aa:c2:ff:11:
                    2d:03:32:0a:c4:64:e6:9f:98:99:37:17:17:f7:e0:
                    d7:69:ad:75:e7:29:ea:44:c4:b9:14:3f:c0:49:df:
                    45:b7:55:45:82:3a:26:5b:a3:de:21:c1:ab:19:f6:
                    57:6f:ab:0e:ff:15:84:f3:6e:98:44:e2:05:2b:bc:
                    54:a5:17:d1:54:e0:d0:34:9c:bc:ca:9f:e2:72:54:
                    02:c5:98:11:b7:82:84:4a:ae:b9:c9:40:fe:79:55:
                    f4:5f:bc:b3:c4:8e:48:90:36:e7:0e:4f:7d:0c:e9:
                    8d:70:ef:79:57:db:3a:7d:d1:15:c8:6c:e7:86:28:
                    1e:cc:7f:42:9e:74:a1:a4:31:ac:e6:bc:88:bb:e9:
                    f6:25:55:bf:30:9b:db:57:65:e0:06:15:c4:99:f5:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2E:9D:4F:AB:93:9B:EA:54:DE:61:E2:81:C8:61:9A:97:BB:8B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/c77d70a9-8c0b-3fbf-8869-3d0bfd9bad5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl

            X509v3 Authority Key Identifier:
                keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.137.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:29:77:3b:ed:51:6f:e0:4c:8e:08:a2:ec:ad:80:7b:9c:0b:
         b4:b5:7c:5d:5a:f0:82:fa:39:e6:a6:51:f3:c4:c3:f2:26:c4:
         cd:e8:36:4a:e6:f3:34:7a:57:27:cf:ca:35:9b:68:6a:11:86:
         94:3d:5f:a5:1b:27:62:f6:03:a2:7e:70:42:eb:1f:f7:4d:6d:
         3f:3f:a2:83:90:de:89:3f:8d:a1:4a:4a:8c:53:36:5c:23:c4:
         3b:29:ac:3c:bb:bc:22:89:14:43:0a:ba:e5:6b:4b:f0:c6:82:
         6f:30:75:49:35:eb:7b:f5:ec:b5:43:48:25:05:00:aa:d0:8f:
         dc:63:29:5a:6f:a9:41:f6:a6:c2:3d:1d:cd:e3:1b:2f:0f:7c:
         b7:4f:ec:d3:70:1f:6b:b7:34:7a:32:33:42:f5:c7:48:f3:eb:
         a5:3f:0f:3c:2a:f0:3d:b8:e3:b2:cc:d6:e1:0c:61:90:43:7f:
         42:68:77:a7:2d:2b:59:15:1e:35:72:9e:b5:ea:1b:78:c0:76:
         53:35:8b:6a:b8:88:e7:18:48:ea:83:cc:76:89:d6:45:f4:c9:
         30:90:7d:49:c8:7b:65:94:bb:35:e2:76:70:f8:d0:7f:a4:b5:
         c0:8c:6c:83:55:7d:a3:e9:60:20:28:49:dc:0d:3c:ff:7c:f1:
         56:7a:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:30:32 2024 by rpki-client on console-ams.rpki-client.org